Mozilla Multiple Products Multiple Location Headers HTTP Response Splitting (CVE-2011-3000)

An HTTP response splitting vulnerability has been reported in Mozilla Firefox, Thunderbird and SeaMonkey. The vulnerability is due to an error in the way the applications handle HTTP responses with multiple location headers. A remote attacker may exploit this vulnerability by enticing users to op...

Mozilla Products DOM Frame Denial of Service Vulnerability (MAC OS X)

The host is installed with Mozilla firefox/thunderbird and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsdomframedosvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products DOM Frame Denial of Service Vulnerability MAC OS X Authors:...

Mozilla Products Multiple Vulnerabilities - Dec 11 (Windows)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsmultvulnwindec11.nasl 7019 2017-08-29 11:51:27Z teissa $ Mozilla Products Multiple Vulnerabilities - Dec 11 Windows Authors: Madhuri D Copyrigh...

Mozilla Products Multiple Vulnerabilities (Dec 2011) - Windows

Mozilla Firefox/Thunderbird/Seamonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Products DOMAttrModified Memory Corruption Vulnerability - Mac OS X

Mozilla Firefox/Thunderbird/Seamonkey is prone to out of bounds memory corruption vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Mozilla Products DOMAttrModified Memory Corruption Vulnerability - Windows

Mozilla Firefox/Thunderbird/Seamonkey is prone to out of bounds memory corruption vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Mozilla Products DOMAttrModified Memory Corruption Vulnerability (MAC OS X)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to out of bounds memory corruption vulnerability. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsdomattrmodifiedmemcrptnvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products DOMAttrModified Memory...

Mozilla Products DOMAttrModified Memory Corruption Vulnerability (Windows)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to out of bounds memory corruption vulnerability. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsdomattrmodifiedmemcrptnvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Mozilla Products DOMAttrModified Memory Corrupti...

Mozilla Products Multiple Vulnerabilities - Dec 11 (MAC OS X)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsmultvulnmacosxdec11.nasl 7044 2017-09-01 11:50:59Z teissa $ Mozilla Products Multiple Vulnerabilities - Dec 11 MAC OS X Authors: Madhuri D...

Mozilla Products Multiple Vulnerabilities (Dec 2011) - Mac OS X

Mozilla Firefox/Thunderbird/Seamonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Products DOM Frame Denial of Service Vulnerability - Mac OS X

Mozilla Firefox/Thunderbird is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3664

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

CVE-2011-3665

Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via an Ogg VIDEO element that is not properly handled after scaling...

CVE-2011-3663

Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture keystrokes entered on a web page, even when JavaScript is disabled, by using SVG animation accessKey events within that web page...

CVE-2011-3661

YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted JavaScript...

Code injection

Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture keystrokes entered on a web page, even when JavaScript is disabled, by using SVG animation accessKey events within that web page...

Code injection

YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via crafted JavaScript...

Out-of-bounds

The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via vectors involving...

Code injection

Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via an Ogg VIDEO element that is not properly handled after scaling...

CVE-2011-3660

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors that...